Lucene search
+L

4514 matches found

OSV
OSV
added 2023/02/17 1:15 p.m.10 views

CVE-2022-40347

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

9.8CVSS6.1AI score0.05348EPSS
SaveExploits5References4
NVD
NVD
added 2023/02/17 1:15 p.m.44 views

CVE-2022-40347

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

9.8CVSS10AI score0.05348EPSS
SaveExploits5References4
Prion
Prion
added 2023/02/17 1:15 p.m.21 views

Sql injection

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

7.5CVSS10AI score0.05348EPSS
SaveExploits5References4Affected Software1
Cvelist
Cvelist
added 2023/02/17 12:00 a.m.56 views

CVE-2022-40347

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

10AI score0.05348EPSS
SaveExploits5References4
hivepro
hivepro
added 2023/02/16 10:15 a.m.12 views

Red Eyes Exploits Hangul EPS Vulnerability and Steganography to Spread Malware

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Red Eyes group used an old vulnerability in Hangul word processor to spread malicious code via steganography, stealing personal PC information and mobile phone data, and executing C&C commands using ...

0.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2023/02/16 2:16 a.m.9 views

Exploit for SQL Injection in Intern_Record_System_Project Intern_Record_System

CVE-2022-40347: Intern Record System - 'phone', 'email', 'dept...

9.8CVSS10AI score0.05348EPSS
SaveExploits5
SUSE CVE
SUSE CVE
added 2023/02/15 5:08 a.m.7 views

SUSE CVE-2016-1609

Multiple cross-site scripting XSS vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted attribute of an IMG element in the phone field of ...

5.4CVSS5.8AI score0.04438EPSS
SaveExploits4References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:28 a.m.7 views

SUSE CVE-2022-22677

A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call...

4.3CVSS6.2AI score0.00651EPSS
SaveExploits0References7
OSV
OSV
added 2023/02/09 7:15 p.m.11 views

CVE-2023-21437

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via implicit broadcast...

5.5CVSS6.1AI score0.00151EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/09 7:15 p.m.32 views

CVE-2023-21437

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via implicit broadcast...

5.5CVSS4.4AI score0.00151EPSS
SaveExploits0References1
Prion
Prion
added 2023/02/09 7:15 p.m.27 views

Improper access control

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via implicit broadcast...

1.7CVSS5.2AI score0.00151EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/02/09 5:15 p.m.10 views

CVE-2022-48290

The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality and integrity...

9.1CVSS5.8AI score0.00445EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/02/09 12:00 a.m.42 views

CVE-2023-21437

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via implicit broadcast...

4CVSS5.5AI score0.00151EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/02/09 12:00 a.m.10 views

CVE-2023-21437

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via implicit broadcast...

4CVSS6.4AI score0.00151EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/02/09 12:00 a.m.9 views

PT-2023-15669 · Unknown · Phone-Pc Collaboration Module

Name of the Vulnerable Software and Affected Versions: phone-PC collaboration module affected versions not specified Description: The issue is related to a logic bypass vulnerability in the phone-PC collaboration module. Successful exploitation of this vulnerability may affect data confidentialit...

9.1CVSS8.9AI score0.00445EPSS
SaveExploits0References4
CVE
CVE
added 2023/02/09 12:00 a.m.59 views

CVE-2022-48290

The CVE-2022-48290 entry concerns Huawei/HarmonyOS: a logic bypass vulnerability in the phone-PC collaboration module (Multi‑Screen Collaboration). Affected software is HarmonyOS with the collaboration module as the implicated component. The root cause is described as a logic bypass, with potenti...

9.1CVSS9.1AI score0.00445EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/02/09 12:00 a.m.12 views

SAMSUNG Mobile devices 授权问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Feb-2023 Release 1 and prior, which stems from incorrect access control in the phone...

5.5CVSS5.8AI score0.00151EPSS
SaveExploits0References2
CVE
CVE
added 2023/02/09 12:00 a.m.77 views

CVE-2023-21437

CVE-2023-21437 affects the Samsung Phone application prior to SMR Feb-2023 Release 1. The root cause is improper access control, enabling local attackers to access sensitive information via implicit broadcast. Impact is described as exposure of sensitive data with local attacker access and no use...

5.5CVSS5.2AI score0.00151EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/02/09 12:00 a.m.47 views

CVE-2022-48290

The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality and integrity...

9.4AI score0.00445EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/02/03 12:00 a.m.8 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Webex Room Phone and Cisco Webex Share HDMI adapters relates to memory release errors, allowing an attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Webex Room Phone and Cisco Webex Share HDMI adapters is related to memory release errors. Exploiting this vulnerability allows an attacker to cause service interruptions by sending specially crafted LLDP packets...

6.5CVSS6.6AI score0.00296EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder